$ rpki-client -vvvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: yxIma2QU9lmQ+O/azP7MMfASqzupRbjBuKxl8nwa3hI= Subject key identifier: BA:42:E2:59:B0:2A:9E:65:0D:30:B6:F7:29:37:3D:7F:3D:D9:70:BD Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 0663 Signing time: Mon 26 Oct 2026 22:34:14 +0000 Manifest this update: Mon 26 Oct 2026 22:34:13 +0000 Manifest next update: Mon 02 Nov 2026 22:34:13 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: H0TVUdwbAd6ZWFYRzP3wIZhDhD7EmtE7yVBMhkyiXZo=) 2: 316ABBEA854611F0AF075D70C4F9AE02.roa (hash: 5K9Nb9oqanLKhMwsnvMrdGufTZkwndyIvoG3/XPKP8U=) 3: izX6cF0_MJe1HjdZz6cbGZZvpcg.asa (hash: oXiVP+5cpTqEs79iRUts0PruOL4rv1VebzMA7ukfCxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 22:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Oct 26 22:34:13 2026 GMT Not After : Nov 2 22:34:13 2026 GMT Subject: CN=6adfd566-d361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:e6:1f:5a:a6:5a:31:82:e5:8b:fb:32:20: 69:80:a1:56:dd:35:21:d3:71:f6:90:3a:4e:97:a4: 50:8b:ad:fa:b1:f5:22:7b:5d:b0:a5:89:8b:8f:12: 84:a5:40:cd:ee:1e:51:c1:58:7b:c2:a1:df:04:23: 2b:20:57:63:c7:9e:88:85:7d:91:ae:63:b0:8e:48: 93:3a:7e:8d:19:ff:26:aa:08:91:6b:fc:80:99:0d: d1:68:45:17:1c:db:37:48:c7:f4:87:1a:66:1e:f6: cd:a2:56:77:74:ac:85:eb:41:1a:20:8f:39:f1:87: c3:21:fb:59:ea:37:ae:9e:e7:9d:c3:51:0a:33:5c: 53:55:ec:e0:26:17:07:e6:ea:d2:8e:e6:68:24:b0: 5e:7f:d2:77:2f:50:89:82:5d:41:b0:9e:9d:c0:99: 4b:3a:45:c0:9f:e4:f9:5d:a8:6b:f9:c4:11:d7:5c: a1:f2:da:cc:33:97:e8:4e:34:4f:26:0d:4d:df:57: 15:9d:66:36:9f:a3:b8:82:02:82:c4:69:45:2d:b3: 99:af:34:a7:d3:7d:7f:b1:af:88:d3:8c:53:fd:0b: 37:0d:e9:4e:26:ea:91:c0:8c:7f:c6:85:e7:5d:4e: 9f:a9:de:9a:fe:06:38:dc:f3:be:7d:d1:68:c8:7e: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:42:E2:59:B0:2A:9E:65:0D:30:B6:F7:29:37:3D:7F:3D:D9:70:BD X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:2e:f1:27:a4:d0:e0:46:39:dc:cc:1d:88:c8:f4:85:3a:7c: c5:33:0a:d2:c9:1f:e0:1c:2f:b9:7a:4c:86:68:c8:5f:f8:67: 1b:eb:06:c9:a2:e1:4a:83:94:87:74:d6:3e:84:75:56:aa:8f: d0:57:77:00:f2:a8:91:f9:1f:11:03:a4:a3:e8:fc:0b:9a:dc: c8:72:3d:e4:38:e4:e7:fe:02:3a:b9:03:4c:ef:08:03:78:63: 7d:14:f2:ff:41:5e:0f:36:7d:08:1e:d6:e8:e5:c2:45:02:f9: 5b:d3:74:b7:bb:22:33:5d:5b:97:c4:ea:44:1d:10:54:5d:85: f7:ae:a8:97:71:7c:c1:2d:db:e2:a2:a6:25:54:78:2c:b8:ca: 3d:ac:0f:f1:73:86:e7:cb:b7:cb:5c:70:45:44:96:8e:8d:5b: 22:8b:14:d2:0e:80:ab:f3:16:da:e5:f6:2a:95:86:61:e1:1b: 3d:15:ad:0d:29:06:f6:be:e3:0a:7b:6c:b6:d6:90:bf:a3:1b: 57:9b:ec:a2:e5:4e:7c:45:99:2e:11:9e:41:aa:42:cb:e7:ff: 35:a6:86:e0:ac:ab:0d:04:c2:c3:6f:2a:d2:30:f9:4f:8a:8c: a6:66:00:1c:10:a8:50:76:a0:a7:fc:70:cb:45:50:8f:56:93: 90:e2:29:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjYxMDI2MjIzNDEzWhcNMjYxMTAyMjIzNDEzWjAYMRYwFAYD VQQDEw02YWRmZDU2Ni1kMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7fmH1qmWjGC5Yv7MiBpgKFW3TUh03H2kDpOl6RQi636sfUie12wpYmLjxKE pUDN7h5RwVh7wqHfBCMrIFdjx56IhX2RrmOwjkiTOn6NGf8mqgiRa/yAmQ3RaEUX HNs3SMf0hxpmHvbNolZ3dKyF60EaII858YfDIftZ6jeunuedw1EKM1xTVezgJhcH 5urSjuZoJLBef9J3L1CJgl1BsJ6dwJlLOkXAn+T5Xahr+cQR11yh8trMM5foTjRP Jg1N31cVnWY2n6O4ggKCxGlFLbOZrzSn031/sa+I04xT/Qs3DelOJuqRwIx/xoXn XU6fqd6a/gY43PO+fdFoyH62pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpC4lmw Kp5lDTC29yk3PX892XC9MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaS7xJ6TQ4EY53MwdiMj0hTp8xTMK0skf4BwvuXpMhmjIX/hnG+sGyaLhSoOU h3TWPoR1VqqP0Fd3APKokfkfEQOko+j8C5rcyHI95Djk5/4COrkDTO8IA3hjfRTy /0FeDzZ9CB7W6OXCRQL5W9N0t7siM11bl8TqRB0QVF2F966ol3F8wS3b4qKmJVR4 LLjKPawP8XOG58u3y1xwRUSWjo1bIosU0g6Aq/MW2uX2KpWGYeEbPRWtDSkG9r7j CntsttaQv6MbV5vsouVOfEWZLhGeQapCy+f/NaaG4KyrDQTCw28q0jD5T4qMpmYA HBCoUHagp/xwy0VQj1aTkOIpug== -----END CERTIFICATE-----Generated at Wed Oct 28 11:36:12 2026 by rpki-client